Oracle 1Z0-997-21 Exam Questions & Answers

Your security team has informed you that there are a number of malicious requests for your web application coming from a set of IP addresses originating from a country in Europe. Which of the following methods can be used to mitigate these type of unauthorized requests?

A. Web Application Firewall policy using access control rules

B. Deny rules in Virtual Cloud Network Security Group for the specific set of IP addresses.

C. Delete Internet Gateway from Virtual Cloud Network.

D. Deny rules in Virtual Cloud Network Security Lists for the specific set of IP addresses.

Which of the following is NOT a good use case for using the functionality available in the Oracle Cloud Infrastructure (OCI) Events service?

A. Publish all events in a specific compartment to Oracle Streaming service for later analysis.

B. Triggers Function using Oracle Functions when new files are uploaded in an OCI Object Storage bucket.

C. Publish a notification when long lived tasks complete, such as OCI Autonomous Database backup completion.

D. Capture Monitoring Alarms and invoke Autoscaling of compute instances.

E. Trigger a notification when a function completes its execution.

You work for a large bank where security and compliance are critical. As part of the security overview meeting, your company decided to minimize the installation of local tools on your laptop. You have been running Ansible and kubectl to spin up Oracle Container Engine for Kubernetes (OKE) clusters and deployed your application. For authentication, you are using an Oracle Cloud Infrastructure (OCI) CLI config file that contains OCIDs, Fingerprint, and a locally stored PEM file. Your security team doesn't want you to store any local API key and certificate, or any other local tools. Which two actions should you perform to spin up the OKE cluster and interact with it? (Choose two.)

A. Create a developer workstation on OCI. Install Ansible and kubectl on it. Use resource principal to authenticate against OCI API and create the OKE Cluster.

B. Develop your own code using OCI SDK to deploy the OKE cluster.

C. Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Use OCI_CLI_AUTH=instance_obo_user environment variable to authenticate using built-in token.

D. Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Bring in your own config file and certificate to authenticate against OCI API.

E. Create a developer workstation on OCI. Install Ansible and kubectl on it. Use instance principal to authenticate against OCI API and create the OKE Cluster.